CVE-2022-49845

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, specifically in the j1939 module. The problem was related to the lack of initialization of the CAN header. The read access to canxl frame::len inside a skbuff created with j1939 revealed that reserved elements in can frame were not initialized before being filled. This has been fixed by initializing the 8-byte CAN header with zeros.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.